Data Processing Addendum
Request a signed DPA, or read what one covers.
The DPA is the formal agreement covering how Steadwright processes your data on the customer’s behalf. We keep a current version, signed and dated, ready to send.
Request a copy
How to get the current DPA
Open /contact?category=privacy (or email privacy@rentaraai.com) and request a current copy of the Steadwright Data Processing Addendum. We send back a signed PDF within five business days; if a redlined version is required we negotiate from that point onward. Sub-processor changes affecting your data are noticed in line with the rights workflow above.
The bundle covers: subject matter and duration of processing, nature and purpose, categories of data and data subjects, subprocessor obligations, security measures, audit rights, breach notification, and termination assistance.
OR email privacy@rentaraai.com — same privacy desk, no form needed.
Business identity
Who you’re contracting with
The contracting entity for RentaraAI is Steadwright LLC, an Indiana limited liability company, with its registered office at 2120 W Washington St, Suite 200, Indianapolis, IN 46222, United States. The entity governs itself under the laws of the State of Indiana, United States.
Data controller
Steadwright LLC (the entity above) decides why and how your personal data is processed when you use RentaraAI.
Third-party subprocessors: OpenAI — API, Polsia, Inc. — R2 object storage, Polsia, Inc. — Email proxy, Stripe, Inc., Render (hosting) + Cloudflare (edge).
Internal components (not shared with any third party): better-auth (local Postgres account store). Full table — categories, locations, retention, links — on /subprocessors.
See /rights for the verification + 30-day fulfilment workflow.
Effective: 2026-09-11 · v2026-08-06